Wiz Pricing 2026: Ultimate Guide for Security Products

Before you sign a Wiz quote, find out how many workloads Wiz will count and what each extra block of them will cost. Wiz keeps list prices off its own website, so the Wiz pricing in this guide comes from the two public sources: Wiz’s AWS Marketplace listing and Vendr’s 2026 transaction data, both checked on October 19, 2026.

Vendr’s 2026 Wiz benchmark puts the median buyer at $158,763 a year, based on 189 purchases, with a range of $30,406 to $536,300.

Key takeaways:

• Wiz sells coverage in blocks of 100 workloads: $24,000 for Essential or $38,000 for Advanced, per 12 months.
• Usage beyond the contracted quantity is billed on top of the contract price, so agree the growth price upfront.
• Sensor, Defend and Code are add-ons with their own units: sensors, log gigabytes and code licenses.
• Microsoft publishes Defender for Cloud prices, Orca lists monthly packs on AWS and Palo Alto sells Cortex Cloud by quote.
• Google completed its Wiz acquisition on March 11, 2026; Wiz keeps its brand and multicloud support.

Note: Google agreed to acquire Wiz for $32 billion in March 2025 and completed the acquisition on March 11, 2026. Wiz now sits inside Google Cloud and keeps its brand, and Google says Wiz products stay available on AWS, Microsoft Azure, Google Cloud and Oracle Cloud. If your company already has a Google Cloud agreement, ask whether a Wiz purchase can count toward it.

How Much Does Wiz Cost in 2026?

Wiz costs $24,000 a year for each block of 100 cloud workloads on Wiz Essential and $38,000 on Wiz Advanced, according to Wiz’s AWS Marketplace listing, sold by Wiz itself. Wiz’s own pricing page shows no figures: it asks for a quote and offers three ways to buy, Wiz One, Wiz Go and à la carte. The same listing prices three add-ons for 12 months:

• Wiz Sensor: 100 runtime sensors, an add-on for Wiz Advanced, $28,000.
• Wiz Code: 100 Wiz Code licenses, an add-on for Wiz Cloud, $58,500.
• Wiz Defend: 300 GB of ingested logs per month, an add-on for Wiz Advanced, $18,000.

The listing also accepts private offers for custom pricing, and Wiz’s pricing page says customers can shift usage between capabilities as their needs change.

Wiz tells you which cloud exposures are reachable. Deciding whether a Wiz Defend detection at 2 a.m. is an attacker or a deploy script is still your team’s job, unless the UnderDefense Agentic AI SOC works on top of Wiz: AI agents take each detection from alert to triage in about 2 minutes, and analysts make the response decision 24/7.

Wiz Pricing Comparison Table: Cost per Billable Unit

Wiz security pricing is set per product, and each product is billed on its own unit, so the useful comparison is the price per unit. The table divides the 12-month prices on Wiz’s AWS Marketplace listing, checked on October 19, 2026, by the units each block includes.

Because coverage is sold in blocks, the bill moves in steps. On the listing’s units, 150 workloads on Wiz Essential means buying two blocks of 100, $48,000 a year, the same as 200 workloads. A private offer can price the gap differently, so ask for it.

Wiz Products Overview: Cloud, Code, Defend and Sensor

Wiz is a cloud-native application protection platform (CNAPP) that covers cloud environments from code to runtime. It scans cloud accounts through APIs without agents, maps resources and risks in its Security Graph, and helps teams fix misconfigurations and vulnerabilities.

Key Components of Wiz’s Platform:

• Wiz Cloud: Provides agentless visibility and risk prioritization to reduce the attack surface across cloud environments.
• Wiz Code: Offers unified visibility and security across code, CI/CD pipelines, and cloud environments, ensuring secure cloud development.
• Wiz Defend: Delivers runtime protection along with threat detection and response capabilities tailored for cloud environments.
• Wiz Sensor: A runtime agent, sold as an add-on, for real-time monitoring with Wiz Advanced or Wiz Defend.

By integrating these components, Wiz enables security, development, and operations teams to collaborate effectively, enhancing overall security posture and facilitating faster, safer cloud development.

Wiz Cloud Pricing and Features

Wiz Cloud comes in two editions, priced per 100 workloads in the table above. According to Macnica, a Wiz distributor, Wiz Cloud Essential gives agentless visibility and the Wiz Security Graph, while Wiz Cloud Advanced adds attack path analysis, workflow integrations and runtime monitoring, which needs a separate Wiz Sensor license. One of the two editions is required before any add-on.

What counts as a workload decides the bill. Stanford University IT’s Wiz FAQ defines one as a virtual machine, a container host, the containers themselves or a serverless function. Macnica adds that Wiz counts workloads with its own calculation logic, so ask for the counting rules in writing before you sign.

Key features of Wiz Cloud: 

• Cloud Security Posture Management (CSPM): Ensures that cloud environments are configured correctly and securely by identifying misconfigurations, vulnerabilities, and compliance issues.
• Vulnerability Management: Provides in-depth visibility into vulnerabilities across cloud resources and offers prioritization based on risk to business operations.
• Runtime Protection: Protects cloud workloads during execution, preventing attacks and responding to runtime threats in real-time.
• Integration with Major Cloud Providers: Works across AWS, Google Cloud, Microsoft Azure, Oracle Cloud, Alibaba Cloud, and VMware vSphere.
• Automated Remediation: Offers automation to correct security issues quickly, reducing human intervention.
• Multi-Cloud Visibility: Shows cloud infrastructure across accounts and providers, helping organizations manage security risks in multi-cloud environments.
• AI-Assisted Insights: Uses AI to support real-time threat detection and suggest security actions.
• Advanced Threat Detection: Capable of identifying complex threats like zero-day attacks or sophisticated APTs.

Pros of Wiz Cloud:

• Quick Setup: Wiz connects to cloud accounts through APIs, with no agents to deploy for scanning.
• Broad Coverage: Covers several layers of cloud infrastructure: configuration, vulnerabilities and runtime.
• Multi-Cloud Support: Supports major cloud providers, which is ideal for organizations with diverse cloud environments.
• Automated Prioritization: Automated detection and prioritization of risks make it easier for teams to focus on critical vulnerabilities.
• Detailed Visibility: Offers deep insights into security posture, enabling better decision-making.

Cons of Wiz Cloud:

• List prices in blocks only: The AWS listing prices coverage in blocks of 100 workloads; any other size needs a private offer.
• Runtime monitoring costs extra: Wiz Sensor is a separate license on top of Wiz Advanced, according to Macnica.
• No price on wiz.io: Wiz’s own pricing page routes every buyer to a quote form.

Wiz Code Pricing and Features

Wiz Code is an add-on to Wiz Cloud, billed per license: the AWS listing sells it in blocks of 100 licenses, priced in the table above. The Wiz Go Bundle listing counts the same product as “Code Active Developers” per month, so confirm whether your quote counts named licenses or developers active in a given month.

Key features of Wiz Code:

• Code Security: Identifies vulnerabilities and misconfigurations within codebases before code is deployed.
• Integration with Development Workflows: Integrates with existing development tools and CI/CD pipelines, so developers keep their workflows.
• Real-Time Threat Detection: Provides immediate alerts on potential security issues, allowing for swift remediation actions.
• Detailed Risk Assessment: Offers in-depth analysis of code vulnerabilities, helping prioritize fixes based on potential impact.
• Agentless Operation: Scans codebases without the need for additional agents, simplifying deployment and reducing overhead.

Pros of Wiz Code:

• Workflow Fit: Fits into existing development processes, adding security checks without burdening developers.
• Real-Time Insights: Delivers immediate feedback on code security, so teams catch risks earlier and fix them faster.
• Wide Coverage: Addresses a wide range of code vulnerabilities across the development lifecycle.
• User-Friendly Interface: Provides an intuitive dashboard that simplifies the management and monitoring of code security efforts.

Cons of Wiz Code:

• Requires Wiz Cloud: Wiz Code is sold as an add-on, so it needs a Wiz Cloud contract first.
• Grows with your developers: Wiz Code is billed per license, so hiring developers raises the bill.

Wiz Defend Pricing and Features

Wiz Defend is billed by log volume: the AWS listing prices it per 300 GB of ingested logs a month for 12 months, as shown in the table above. Macnica lists Wiz Advanced and Wiz Sensor as prerequisites for Wiz Defend, so a Defend quote also carries the cost of both.

Key features of Wiz Defend:

• Unified Security Platform: Wiz Defend consolidates various security tools into a single platform, offering enhanced visibility and simplified management of security operations.
• Real-Time Threat Detection: Provides immediate alerts on potential security threats, enabling swift response and mitigation actions.
• Multi-Cloud Coverage: Offers protection across multiple cloud platforms, including AWS, Azure, and GCP, with consistent security policies and visibility.
• Contextual Risk Evaluation: Assesses risks within the cloud environment, helping prioritize remediation efforts based on potential impact.
• Cloud and Runtime Detection: Combines cloud logs with the Wiz Sensor on workloads to detect threats at runtime.

Pros of Wiz Defend:

• Ease of Integration: Wiz Defend works with existing cloud infrastructures without disrupting operations.
• Enhanced Visibility: Provides visibility into cloud environments, supporting earlier threat detection and response.
• Efficient Risk Management: Offers contextual risk evaluations, helping prioritize remediation efforts effectively.

Cons of Wiz Defend:

• Prerequisites add cost: Wiz Defend needs Wiz Advanced, and Macnica lists Wiz Sensor as required too.
• Log volume drives the price: Each block covers 300 GB of logs a month, so a new log source can push you into a second block.

Wiz Pricing vs Orca Security, Microsoft Defender for Cloud and Cortex Cloud

Each CNAPP counts a different unit, so compare the unit before the price. The figures below come from each vendor’s own pricing page or AWS Marketplace listing, checked on October 19, 2026. If you only need the posture layer, a CSPM tool is the narrower purchase.

Wiz vs Orca Security

Pricing comparison: Orca Security’s AWS Marketplace listing sells monthly packs of concurrent EC2 workloads: $7,000 a month for up to 100, $12,000 for up to 300, $17,000 for up to 500 and $30,000 for up to 1,000.

Pricing notes: Orca’s packs are monthly and count concurrent EC2 hosts, while Wiz’s listing prices 12-month blocks of cloud workloads. Convert both to a yearly cost for the same workload count before you compare.

Wiz vs Microsoft Defender for Cloud

Pricing comparison: Microsoft’s Defender for Cloud pricing page lists Foundational CSPM free, Defender CSPM at $5.11 per billable resource a month and Defender for Servers Plan 2 at $14.60 per server a month.

Pricing notes: Microsoft bills only servers, storage accounts, databases and serverless resources, and counts 8 functions or web apps as one billable resource. Pre-purchased Commit Units save up to 22% over pay-as-you-go prices for 12 months.

Wiz vs Palo Alto Networks Cortex Cloud

Pricing comparison: Palo Alto Networks sells Cortex Cloud, its CNAPP, through a demo request and quote, and its product page shows no price.

Pricing notes: ask how Cortex Cloud counts billable units and what one unit covers, since Palo Alto Networks pricing is set per quote.

What Hidden Costs Should You Plan For?

The block price on the quote is where a Wiz bill starts. These costs come from how each unit is counted and from what each add-on requires:

• Usage above the contract. The AWS listing bills usage beyond the contracted quantity on top of the contract price, through Wiz Consumption Billing Units listed at $0.01 each.
• Workloads you did not plan for. Containers and serverless functions count as workloads under Stanford’s definition, so moving services to Kubernetes can raise the count without adding a single server. Estates spread across several providers make this harder to forecast, which is why multi-cloud security budgets need a per-provider count.
• Add-ons that need other add-ons. Wiz Defend needs Wiz Advanced, and Macnica lists Wiz Sensor as required too.
• Log growth. Wiz Defend is priced per 300 GB of logs a month, so a new log source can push you into a second block.
• Developer growth. Wiz Code is billed per license, so the bill follows your engineering headcount.
• Snapshot storage in your own cloud. Agentless scanning creates temporary disk snapshots; Stanford’s Wiz FAQ, read in October 2026, puts that storage charge at 2 cents to $2 per cloud account a month.
• Renewal increases. Vendr’s 2026 Wiz guide warns that renewals may carry annual price escalations of 3% to 5%; cap them in the contract.

Then add the cost of an exposure nobody works. Verizon’s 2026 DBIR found exploitation of vulnerabilities was the most common initial access vector, at 31%, and IBM’s 2026 study puts the global average breach at $4.99 million.

How to Negotiate Wiz Pricing: Workload Counts and Growth

A Wiz quote is a count multiplied by a unit price, so most of the leverage sits in how the count is measured and how growth is priced. Vendr’s 2026 data shows Wiz buyers saving 22% on average. Use these levers:

• Get the workload definition in writing. Ask which resources count (virtual machines, container hosts, containers, serverless functions, data stores) and whether stopped or non-production resources are excluded.
• Agree how the count is measured. Macnica’s FAQ says Wiz licenses on the average number of workloads used, so short bursts create no overage (rules as of January 2026). Put that averaging window in your contract.
• Price the next blocks now. Ask for the price of each additional 100-workload block for the full term, so growth does not reopen the negotiation.
• Set one true-up date. Vendr advises clarifying how overages are priced and whether you can true up annually without penalty; one annual true-up is easier to budget than monthly overage charges.
• Compare Wiz Go if your footprint is small. The Wiz Go Bundle on AWS lists $222,000 for 36 months, about $74,000 a year, for 300 Advanced workloads, 150 GB of Defend ingestion, 100 sensors and 50 Code active developers per month. Buying 300 Advanced workloads alone at the 12-month list price costs $114,000 a year.
• Bundle add-ons at signing. Vendr reports that buyers who bundle modules in the initial purchase often get better pricing than those who add them mid-contract.

Term length and quarter-end timing are levers too. Settle the count and the growth terms first, because they compound in every year of the contract.

Wiz Finance and Procurement FAQ

Can you buy Wiz through AWS Marketplace?

Yes. Wiz sells its platform on AWS Marketplace itself, with public 12-month prices and private offers for custom terms. You pay upfront or in installments under the contract terms, and the charges arrive on your AWS bill.

What happens to the bill if your workload count grows mid-contract?

On the AWS listing, usage beyond the contracted quantity is billed on top of the contract price. Macnica says Wiz licenses on average usage, so a short burst does not trigger an overage. For lasting growth, agree the price of extra blocks in the contract.

How long are Wiz contracts?

The Wiz listing on AWS Marketplace offers 12-, 24- and 36-month contracts, and the Wiz Go Bundle is listed as a 36-month contract. Access to what you bought ends when a contract expires unless you renew or replace it.

Does the Google acquisition change how you buy Wiz?

Google says Wiz keeps its brand inside Google Cloud and that Wiz products remain available across all major clouds and through partner solutions. Ask your account team whether your paper or pricing changes at renewal.

How the UnderDefense Agentic AI SOC Works on Top of Wiz

UnderDefense publishes this guide and does not sell a CNAPP, so it is not ranked against Wiz here. Its place is the step after a Wiz finding: deciding whether an exposed workload is being used by an attacker, and acting on it.

That step is where time is lost. The same 2026 DBIR found only 26% of critical CISA KEV vulnerabilities were fully remediated in 2025, with a median of 43 days. Until a fix lands, someone has to watch the exposure Wiz has already found, including at night.

UnderDefense builds an agentic AI platform that unifies security operations and compliance on top of the stack you already own. When Wiz findings and alerts are forwarded into the SIEM you run, such as Splunk or Microsoft Sentinel, the Agentic AI SOC works them alongside the rest of your existing SIEM data. The table shows what changes for your team.

Bring one Wiz Defend detection from last week. Book a triage demo